AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

VMware security advisories

126 advisories · 57 critical or high in 12 months · latest Sep 15

Advisories page

60 of 126 advisories

Medium 4.2Sep 15VMware sealed-secrets: observable discrepancyCVE-2026-59341no fix yetCritical 9.2Sep 11VMware UAA: improper access controlCVE-2026-47839no fix yetHigh 7.7Aug 29VMware bosh-vsphere-cpi-release: improper certificate validationCVE-2026-41012fixed in 98.0.6Medium 6.5Aug 27VMware Spring AMQP: resource leakCVE-2026-59320no fix yetMedium 4.2Aug 27VMware Spring Integration: race conditionCVE-2026-59321no fix yetMedium 6.3Aug 27VMware Spring Integration: improper input validationCVE-2026-59322no fix yetHigh 8.2Aug 27VMware Spring Integration: race conditionCVE-2026-59324no fix yetHigh 8.0Aug 27VMware Spring Integration: unsafe deserializationCVE-2026-59307no fix yetMedium 6.8Aug 27VMware Spring Integration: link followingCVE-2026-59311no fix yetCritical 9.8Aug 27Spring MVC applications using the functional web framework are vulnerable to...CVE-2026-59313no fix yetLow 3.7Aug 27Applications that build a Content-Disposition header value from untrusted input...CVE-2026-59314no fix yetMedium 5.3Aug 27VMware Spring Cloud Config: denial of serviceCVE-2026-59315no fix yetHigh 8.2Aug 27VMware Spring Authorization Server: cross-site scriptingCVE-2026-59316no fix yetMedium 6.5Aug 27VMware Spring for Apache Kafka: improper quantity validationCVE-2026-59317no fix yetMedium 4.3Aug 27VMware Spring AI: attacker could inject RediSearch syntaxCVE-2026-59319no fix yetLow 3.1Aug 27VMware Spring Cloud Function: improper input validationCVE-2026-59298no fix yetLow 3.1Aug 27Composition lookup can potentially poison base function in Spring Cloud FunctionCVE-2026-59299no fix yetLow 3.1Aug 27VMware Spring Cloud Function: secrets in logsCVE-2026-59300no fix yetLow 3.1Aug 27VMware Spring Cloud Function: secrets in logsCVE-2026-59301no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: secrets in logsCVE-2026-59302no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: resource exhaustionCVE-2026-59303no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: type confusionCVE-2026-59304no fix yetLow 3.1Aug 27Partition interceptor may be improperly added while sending messageCVE-2026-59305no fix yetLow 3.1Aug 27VMware Spring Cloud Stream: unsafe deserializationCVE-2026-59306no fix yetHigh 7.4Aug 27VMware Spring for GraphQL: information disclosureCVE-2026-59288no fix yetHigh 7.5Aug 27VMware Spring for GraphQL: denial of serviceCVE-2026-59289no fix yetLow 2.0Aug 27VMware Spring Cloud Function: arbitrary file readCVE-2026-59291no fix yetLow 3.2Aug 27VMware Spring Integration: insecure permissionsCVE-2026-59292no fix yetMedium 6.6Aug 27VMware Spring Integration: tamperingCVE-2026-59293no fix yetMedium 5.9Aug 27VMware Spring AI: path traversalCVE-2026-59294no fix yetLow 3.1Aug 27VMware Spring Cloud Function: origin validation errorCVE-2026-59297no fix yetMedium 6.1Aug 27VMware Spring Framework: code injectionCVE-2026-59281no fix yetHigh 7.5Aug 27VMware Spring Framework: denial of serviceCVE-2026-59282no fix yetCritical 9.1Aug 27Applications that evaluate Spring Expression LanguageCVE-2026-59283no fix yetHigh 7.6Aug 27VMware Spring Cloud Commons: mass assignmentCVE-2026-59284no fix yetHigh 8.1Aug 27VMware Spring for GraphQL: unsafe deserializationCVE-2026-59285no fix yetHigh 8.1Aug 27VMware Spring for GraphQL: code executionCVE-2026-59286no fix yetMedium 5.9Aug 27VMware Spring for GraphQL: denial of serviceCVE-2026-59287no fix yetMedium 5.9Aug 27Several components in Spring Security compare security-sensitive values using...CVE-2026-59276no fix yetLow 3.7Aug 27VMware Spring Security: protection mechanism failureCVE-2026-59277no fix yetMedium 6.8Aug 27Any application shipping logs to RabbitMQ over TLS via the Log4j2 appenderCVE-2026-59272no fix yetMedium 4.3Aug 27VMware Spring Framework: path traversalCVE-2026-59280no fix yetCritical 9.6Aug 27VMware Spring Security: cross-site scriptingCVE-2026-59354no fix yetMedium 6.1Aug 27VMware Spring Authorization Server: open redirectCVE-2026-59355no fix yetMedium 6.6Aug 27VMware Spring AMQP: unsafe deserializationCVE-2026-59275no fix yetMedium 6.5Aug 27VMware Spring for Apache Kafka: server-side request forgeryCVE-2026-59278no fix yetCritical 9.4Aug 27VMware Spring Security: improper authorizationCVE-2026-59270no fix yetMedium 5.3Aug 27VMware Spring AMQP: information disclosure in errorsCVE-2026-59271no fix yetMedium 6.5Aug 27VMware Spring Integration: denial of serviceCVE-2026-59274no fix yetCritical 9.8Aug 27Spring MVC and WebFlux applications are vulnerable to stream corruptionCVE-2026-47890no fix yetCritical 9.8Aug 27VMware Spring Framework: resource exhaustionCVE-2026-47891no fix yetCritical 9.8Aug 27VMware Spring Framework: improper authorizationCVE-2026-47892no fix yetHigh 7.5Aug 27VMware Spring Framework: information disclosure in errorsCVE-2026-47893no fix yetMedium 4.9Aug 27Spring Cloud Config Server native environment repositoryCVE-2026-47894no fix yetHigh 7.5Aug 27VMware Spring Framework: denial of serviceCVE-2026-47886no fix yetMedium 6.1Aug 27VMware Spring Framework: open redirectCVE-2026-47887no fix yetHigh 7.5Aug 27VMware Spring Framework: memory leakCVE-2026-47888no fix yetHigh 7.5Aug 27A WebFlux application running on the Jetty 12 Core reactive adapter serializes...CVE-2026-47889no fix yetMedium 5.9Aug 27VMware Spring Batch: resource exhaustionCVE-2026-47881no fix yetMedium 6.1Aug 27VMware Spring Framework: open redirectCVE-2026-47883no fix yet
About VMware

Security advisories VMware publishes for its own products.

www.broadcom.com/support/vmware-security-advisoriesVMware

VMware elsewhere on Ibis: Paydays · TechConf